Re: [Endymail] [messaging] Mesh/Recrypt

Andy Isaacson <adi@hexapodia.org> Mon, 29 August 2016 00:59 UTC

Return-Path: <adi@hexapodia.org>
X-Original-To: endymail@ietfa.amsl.com
Delivered-To: endymail@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1EBE12D0B1 for <endymail@ietfa.amsl.com>; Sun, 28 Aug 2016 17:59:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.448
X-Spam-Level:
X-Spam-Status: No, score=-2.448 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.548] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3JrckchPb43k for <endymail@ietfa.amsl.com>; Sun, 28 Aug 2016 17:59:48 -0700 (PDT)
Received: from straum.hexapodia.org (straum.hexapodia.org [192.235.78.53]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76BBC12B069 for <endymail@ietf.org>; Sun, 28 Aug 2016 17:59:48 -0700 (PDT)
Received: by straum.hexapodia.org (Postfix, from userid 22448) id A6A414384; Sun, 28 Aug 2016 17:59:47 -0700 (PDT)
Date: Sun, 28 Aug 2016 17:59:47 -0700
From: Andy Isaacson <adi@hexapodia.org>
To: Tony Arcieri <bascule@gmail.com>
Message-ID: <20160829005947.GM745@hexapodia.org>
References: <CAHOTMV+iHOPEzmCcngZP1aO71hKDTGkARPvWSStJ_FDhhVE+xg@mail.gmail.com> <CAMm+LwithiP7pfdyLz8BB0m=pNk6VyYxzvypdzDhA_mq03_PRA@mail.gmail.com> <CAHOTMVKwHcqF3g_YDAJeTm6gQU8FrwF6O1KYaqqf+_O6M33HXw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Disposition: inline
In-Reply-To: <CAHOTMVKwHcqF3g_YDAJeTm6gQU8FrwF6O1KYaqqf+_O6M33HXw@mail.gmail.com>
X-Old-GPG-Fingerprint: 1914 0645 FD53 C18E EEEF C402 4A69 B1F3 68D2 A63F
X-GPG-Fingerprint: A5FC 6141 F76D B6B1 C81F 0FB7 AFA0 A45F ED3D 116D
X-GPG-Key-URL: http://web.hexapodia.org/~adi/gpg.txt
X-Domestic-Surveillance: money launder bomb tax evasion
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/endymail/zYg1TTTSvG04KEQxgycG_G0s-XU>
Cc: messaging <messaging@moderncrypto.org>, Phillip Hallam-Baker <phill@hallambaker.com>, endymail@ietf.org
Subject: Re: [Endymail] [messaging] Mesh/Recrypt
X-BeenThere: endymail@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: <endymail.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/endymail>, <mailto:endymail-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/endymail/>
List-Post: <mailto:endymail@ietf.org>
List-Help: <mailto:endymail-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/endymail>, <mailto:endymail-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Aug 2016 00:59:49 -0000

On Mon, Aug 22, 2016 at 07:48:33PM -0700, Tony Arcieri wrote:
>As far as an ECC-based approach goes, I think something like the multiparty
>Signal protocol[1] is a good starting point for how to solve the general

[snip]

>[1] I'm not sure there's a more recent overview than this, which is
>probably out-of-date: https://whispersystems.org/blog/private-groups/

Based on a bit of experimenting with the various language 
implementations of libsignal, I'm pretty sure Signal group messages 
don't do the encrypt-to-each-recipient thing anymore.  But I haven't 
tried to interoperate with or even study the mainline client, so it's 
possible I'm missing something.

-andy